fix: request token without auth params
clean up